Data security compliance - An application-oriented solution for small businesses
Loading...
Author (Corporation)
Publication date
2026
Type of student thesis
Course of study
Collections
Type
04B - Conference paper
Editor (Corporation)
Supervisor
Parent work
Society 5.0. 5th International Conference Society 5.0 2025, San Benedetto Del Tronto, Italy, June 25–27, 2025, Revised Selected Papers
Special issue
DOI of the original publication
Link
Related research data
Series
Communications in Computer and Information Science (CCIS)
Series number
2787
Volume
Issue / Number
Pages / Duration
13-24
Patent number
Publisher / Publishing institution
Springer
Place of publication / Event location
San Benedetto Del Tronto
Edition
Version
Programming language
Assignee
Practice partner / Client
Abstract
In the last decade, compliance management and data security have become increasingly critical for businesses, driven by evolving regulations. Small companies, in particular, face challenges in navigating complex regulatory landscapes and implementing effective data security compliance processes or even better sufficient management systems. To address this problem, this research developed an application-oriented solution, the “Action Plan for Data Security Compliance” (Act4DSC), a structured, evidence-based and easy-to-use tool designed to guide small businesses through the initial steps of data security compliance. Utilizing design science methodology, Act4DSC integrates the NIST Cybersecurity Framework 2.0 as its foundational structure with practitioner insights from several qualitative expert interviews. The Act4DSC offers a step-by-step approach, including regulatory alignment, stakeholder considerations, prioritization, data criticality classification, and gap analysis. Expert evaluations confirm its usability, adaptability, and structured guidance, making data security compliance more accessible for smaller businesses. Act4DSC fills a critical gap by tailoring compliance solutions for smaller businesses, bridging the divide between theoretical frameworks and practical implementations.
Keywords
Event
5th International Conference Society 5.0 2025
Exhibition start date
Exhibition end date
Conference start date
25.06.2025
Conference end date
27.06.2025
Date of the last check
ISBN
978-3-032-15462-0
978-3-032-15463-7
978-3-032-15463-7
ISSN
Language
English
Created during FHNW affiliation
Yes
Strategic action fields FHNW
Publication status
Published
Review
peer-reviewed
Open access category
Closed
Citation
Asprion, P., Tschan, T., & Käppler, S. (2026). Data security compliance - An application-oriented solution for small businesses. In F. Corradini, K. Hinkelmann, H. Smuts, & B. Re (Eds.), Society 5.0. 5th International Conference Society 5.0 2025, San Benedetto Del Tronto, Italy, June 25–27, 2025, Revised Selected Papers (pp. 13–24). Springer. https://doi.org/10.1007/978-3-032-15463-7_2